Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e46fa6c1-9fa9-45b2-a661-fa14136ac407.roa
File: e46fa6c1-9fa9-45b2-a661-fa14136ac407.roa (raw, json)
Hash identifier: qtzrgpVjzhPvrusby6okjKhM19u++OM8Vji1WWPxpj4=
Subject key identifier: 11:32:D3:44:46:1A:B1:5E:AD:CF:B5:C2:CB:4E:7C:E7:2C:EF:81:A5
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 50405F14FBAAC3EE6C29FE5A02F64FBC45FC6113
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e46fa6c1-9fa9-45b2-a661-fa14136ac407.roa
Signing time: Sun 17 May 2026 02:00:24 +0000
ROA not before: Sun 17 May 2026 02:00:24 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:40:5f:14:fb:aa:c3:ee:6c:29:fe:5a:02:f6:4f:bc:45:fc:61:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 17 02:00:24 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=a71d6dc7951cbfeb60eeb109798d955edf7b651e04b10acba6b02fb255a144e6, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:18:2e:22:e5:10:95:30:bb:21:e0:e3:a2:
95:41:df:6a:8c:12:5a:07:01:85:05:9e:87:ff:5a:
c5:34:55:98:ee:aa:56:73:2e:04:72:4a:9a:97:f3:
3c:3d:78:eb:fb:eb:9f:5d:e0:2b:83:88:fb:7d:3b:
dd:21:24:51:28:05:f2:c0:ac:4f:13:c1:d5:a0:12:
ec:d9:8b:53:bc:7c:ef:da:5d:c5:13:b2:3b:57:b9:
1d:39:22:7e:38:71:83:ef:9e:d2:2d:15:1e:f7:e4:
48:1d:59:c3:6a:cd:e5:aa:a7:4e:13:cb:6f:8f:32:
16:0b:aa:0b:04:e8:a8:39:f4:4b:b1:62:f2:cb:f9:
84:0c:69:8e:08:58:24:b0:00:70:63:96:0a:f3:0b:
30:77:40:cb:67:96:59:0e:c4:90:15:1c:d3:43:b0:
0a:31:77:ad:fc:6b:f2:02:8c:6e:e7:30:a8:45:01:
5c:ee:a7:6e:3b:98:5a:d4:5f:87:49:1d:7f:6a:19:
e2:4f:cc:87:31:e5:46:25:97:7c:3b:e3:81:bd:8f:
65:46:c5:20:bb:85:fd:a5:4a:3c:6c:81:ae:e8:22:
f9:d5:7c:a0:c0:95:25:d3:39:f4:77:fb:73:d8:7d:
8a:fe:64:f4:8d:cd:4d:f8:0e:5d:a8:be:00:63:fc:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:D3:44:46:1A:B1:5E:AD:CF:B5:C2:CB:4E:7C:E7:2C:EF:81:A5
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e46fa6c1-9fa9-45b2-a661-fa14136ac407.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.252.0/22
Signature Algorithm: sha256WithRSAEncryption
50:1c:d7:f1:05:f2:78:8a:fb:c5:e6:ab:12:67:a2:7a:46:d8:
a1:d1:5b:68:98:4a:a3:5e:20:cf:80:64:d9:a0:e0:da:ea:50:
5f:4e:3d:97:eb:dc:f4:82:20:8b:02:11:33:fc:63:78:d9:58:
c4:61:1a:1b:aa:f0:63:e4:f0:a7:82:33:b2:3a:62:6c:0a:f6:
6d:98:f1:8e:cd:54:bb:55:19:c5:82:ff:30:2d:f7:4d:03:d0:
e8:92:f6:08:9e:e9:1e:b6:7c:9c:ad:d0:7d:46:b3:77:6f:cd:
de:45:95:6b:1f:c5:37:98:33:bf:9f:58:62:b7:65:64:13:64:
49:ad:de:35:1d:12:62:f9:e6:ff:f0:fa:7f:19:b8:8a:77:31:
9b:d7:be:c2:db:52:39:86:8c:bb:cd:7e:ad:9b:82:2d:8e:95:
13:a5:45:99:55:c7:50:a4:72:86:c9:af:81:58:7d:08:8d:69:
01:6b:0d:34:56:b0:a5:52:d2:1c:08:89:49:38:ce:35:bf:00:
4f:aa:0d:c5:2a:d4:3d:12:9f:da:93:59:96:fb:41:69:2b:9d:
91:01:d5:8c:99:26:9c:9c:7b:bc:e4:8d:3a:d3:e7:54:3d:31:
fd:81:e8:93:8f:e7:29:ae:0f:10:4e:33:69:0a:92:92:58:4b:
73:3f:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:20 2026 by rpki-client